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INTHECI.ATMS- 

1. (Currently Amended) A system for identifying a computer vir.,. 

eeweBt in responses sent in reply to a user request for content, the system comprising: 

a user input device tliat generates a request for content including an address of a target 
S€rvei-,a destination header, a reouest/rei rieve protacc^] field, and request content : 

a scan module that receives the user request for content and ideimfies is capable of 
identifying the request as a request for content by scanning the request content and the rftq..«.^t/ 
retrieve protocol field: 

a proxy module that modifies tlie request for content to be so that it is redirected to a 
proxy server; 

a network that routes the request for content to the proxy server; and 

the proxy server that receives the request, forwards the request to the target server, and 
receives a response from the target server. 



2. (Currently Amended) The system of claim 1 wherein the proxy server identifies 

the computer virus undesirable coniont in the response and processes the response according to 
defined parameters. 



3. (Cuirently Amended) The system of claim 2, wherein the proxy server sends at 

least a portion of the response to the user, the portion of the response not including the computer 
jdBjS imdoQirabJ o content . 



4. (Currently amended) The system of claim 2, vvherem the proxy server sends 

notification message back to the user, the notification message containing data related to the 

computer virus l i ndnrinhln fnr^tnnr 
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5. (Original) The system of claim I . further comprising: 

a user preference module that receives user-defined parameters utiUzed by the proxy 
server when processing the response. 



6. (Original) The system of claim 1, wherein the proxy module redirects the request lo 
the proxy server by modifying the reciuesi. 



7. (Original) The system of claim 6, wherein the proxy module modifies the request by 
adding a redirection destination header to the request. 



8. (Cmxently amended) The system of claim 1. wherein the pr^xy server further 

quarantines the computer vims imdocirablo oonium. 



9. (Cancelled) 



10. (Original) The system of claim 1. wherein the defined parameter are proxy server 
default parameters. 



1 1 . (Original) Tlie system of claim 1. wherein the defined parameters arc user-defined 

parameters. 



1 2. (Original) The system of claim 1 , wherein the defined parameters are a combination 
of user-dcfmed parameters and proxy server default parameters. 



3 



PAGE U9 * RCVD AT 8/212006 2:01:58 PM (Eastern Daylight Time] ' SVR:USPTO-EFXRF-5/7 ' DNiS:2738300 ' CSID:612 825 6304 * DURATION (mni-ss):01-24 



AUG-02-2006 12:05 FROM-BEYER WEAVER THOMAS 



612-825-6304 



T-002 P. 006/009 F-790 



13. (Original) The system of claim 1 , wherein the scan module and Hie proxy module are 
located in a network gateway device. 



14. (Original) The system of claim 5, wherein the scan raodiJe and the proxy module are 
located in a network gateway device. 



1 5, (Original) The system of claim 1 » wherein the network gateway device further 
comprises a firewall and a router. 
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16. (Cmrenily Amended) A method for identifying a compater vim. 

eefitent in responses sent in reply to a user request for content, the method comprising: 

receiving input fi om a user including at least one request for content addressed to a target 
ser%^er, the request havinp a desti tution header, a reouest/retriev^ p rotocol fi^M «nH . 
content: 

identifying the request for content by scanning fee only the request content fe^^eateiK 
and the re quest/retrieve protocol field: 

redirecting the request for content to a proxy server; 
receiving the request for content at the proxy server; 

sending the request for content from the proxy server to the target server for generation of 
a response; 

receiving the response from the target server at the proxy server, 
scanning the response for a computer vim..; undosirablo oomoiil; and 
processing the response according to defined parameters. 

17. (Currently amended) The method of claim 16. further comprising: 

identifying the computer virus undoairablo ooni-atrt in the response; 
modifying the response to remove the computer virus undora'rablo ooutuii; and 
sending the modified response from the proxy server to the user. 



18. (Cancelled) 

19. (Original) The method of claim 16. wherein request for content is redirected to the 
proxy serv er by modifying the request. 



20. (Original) The method of claim 1 9. wherein the request for content is modified by 
adding a redirection destination header to the request. 



2 1 . (Original) The method of claim 1 6. wherein the request for content is redirected to 
the proxy server by establishing a session with the proxy server. 
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22. (Original) The method of claim 16, further comprising: 

receiving input of at least one user-defined parameter for use by the proxy server in 
processing the computer virus undosirablo oontont . 



23. (Original) The method of claim 22, wherein the user-defined parameter is input using 
a browser application. 

24. (Previously Amended) The method of claim 22, wherein the nser-defined 
parameter is sent to the proxy server by modifying the request for content. 



25. (Original) The method of claim 22, wherein the user-defined parameter is sent to the 
proxy server during a session established with the proxy server. 

Claims 26-27 (Cancelled) 
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